|
--- |
|
name: "CodeQL" |
|
|
|
on: |
|
workflow_dispatch: |
|
push: |
|
branches: |
|
- master |
|
pull_request: |
|
schedule: |
|
- cron: '53 3 * * 0' |
|
|
|
jobs: |
|
analyzeJava: |
|
name: AnalyzeJava |
|
runs-on: 'ubuntu-latest' |
|
permissions: |
|
actions: read |
|
contents: read |
|
security-events: write |
|
|
|
steps: |
|
- name: Checkout repository |
|
uses: actions/checkout@v7 |
|
|
|
- name: Set up JDK |
|
uses: actions/setup-java@v5.7.0 |
|
with: |
|
java-version: 21 |
|
distribution: 'temurin' |
|
|
|
- name: Initialize CodeQL |
|
uses: github/codeql-action/init@v4.37.7 |
|
with: |
|
languages: 'java-kotlin' |
|
|
|
- name: Build |
|
run: mvn --batch-mode --update-snapshots verify |
|
|
|
- name: Perform CodeQL Analysis |
|
uses: github/codeql-action/analyze@v4.37.7 |
|
with: |
|
category: "/language:java-kotlin" |
|
|
|
analyzeActions: |
|
name: AnalyzeActions |
|
runs-on: 'ubuntu-latest' |
|
permissions: |
|
actions: read |
|
contents: read |
|
security-events: write |
|
|
|
steps: |
|
- name: Checkout repository |
|
uses: actions/checkout@v7 |
|
|
|
- name: Initialize CodeQL |
|
uses: github/codeql-action/init@v4.37.7 |
|
with: |
|
languages: 'actions' |
|
|
|
- name: Perform CodeQL Analysis |
|
uses: github/codeql-action/analyze@v4.37.7 |
|
with: |
|
category: "/language:actions" |
|
... |